Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45130e6e-a893-3002-8d66-fb8ea7fa140f.roa
File:                     45130e6e-a893-3002-8d66-fb8ea7fa140f.roa (raw, json)
Hash identifier:          kdXOEI1tldhEE5h/Rom1bH7KpGaXN3ptH1G4+RPofzE=
Subject key identifier:   49:76:E2:C0:09:5C:D9:22:89:4C:C7:B4:99:DE:FA:74:2D:D7:00:EA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DAF1EE0D900C03D3110D53280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45130e6e-a893-3002-8d66-fb8ea7fa140f.roa
Signing time:             Fri 01 May 2026 01:30:15 +0000
ROA not before:           Fri 01 May 2026 01:30:15 +0000
ROA not after:            Thu 30 Jul 2026 01:30:15 +0000
asID:                     209006
IP address blocks:        2001:470:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:1e:e0:d9:00:c0:3d:31:10:d5:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  1 01:30:15 2026 GMT
            Not After : Jul 30 01:30:15 2026 GMT
        Subject: CN=422721bf-b10f-4775-8016-d2459e8339fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6e:17:6c:59:03:65:1c:bd:3c:9d:f5:9d:01:
                    6b:04:73:20:02:cd:7a:31:4f:a7:2c:c0:18:4c:b5:
                    fa:65:c2:d2:dd:ae:95:23:06:eb:ea:c1:68:28:0e:
                    d3:77:e0:2d:a8:de:3c:87:c8:35:b0:8b:fa:31:66:
                    e6:95:e7:69:48:9d:04:d9:d0:c2:a9:75:75:1b:88:
                    e5:62:fc:58:da:3d:cf:ad:cc:d8:0b:ae:5b:22:9e:
                    8e:23:9f:fd:16:d8:47:13:a2:ba:8a:05:0f:6c:8f:
                    cc:1a:78:e0:20:5b:46:89:4f:01:6b:25:e5:8d:82:
                    05:7c:b1:9a:f1:48:84:a4:41:19:a8:85:41:be:77:
                    3e:e3:f1:7f:35:4d:e5:74:f2:ac:ef:ad:26:bb:4d:
                    24:2f:18:62:c5:eb:c4:ec:44:46:73:f9:cf:df:10:
                    9e:0c:b3:2b:d0:0f:82:0a:18:0a:eb:46:26:06:f7:
                    2e:ba:06:3e:cc:b0:32:2c:85:24:44:38:0a:16:59:
                    5a:17:2c:10:80:b7:f0:86:69:22:01:46:68:42:a7:
                    71:79:1f:0d:4a:b5:3b:48:d2:8b:16:7c:40:75:96:
                    3d:90:80:3b:61:6d:95:c0:21:98:5a:b8:1d:11:e6:
                    0b:6c:12:29:3c:1f:7c:79:a3:5f:3c:d1:88:66:44:
                    97:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:76:E2:C0:09:5C:D9:22:89:4C:C7:B4:99:DE:FA:74:2D:D7:00:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45130e6e-a893-3002-8d66-fb8ea7fa140f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:96:e7:c9:8d:cb:22:ec:e7:3f:e2:63:45:1c:bf:97:77:77:
         c1:34:e8:05:e7:74:30:50:6b:b3:20:2d:b8:09:c9:58:78:7b:
         88:81:a3:1a:d9:9e:07:78:ce:52:75:fc:15:a4:2b:2c:d6:f9:
         7e:54:bc:db:f1:3f:96:8e:4b:e4:72:cb:6c:ad:8d:5c:d7:10:
         26:8f:9a:7c:61:f4:a3:23:f5:77:5b:96:01:52:90:bb:44:47:
         97:d2:f6:cc:35:15:dd:5f:b3:8b:ca:31:a4:fe:b6:f2:1b:97:
         6d:8c:bf:14:7a:84:c5:8a:9f:d7:19:0f:78:64:ce:8f:fa:8b:
         8b:de:1c:af:08:dd:14:b7:5a:72:7d:a9:90:90:5c:c4:04:64:
         be:3a:67:1f:a8:0e:51:58:66:5b:6f:8d:e7:75:16:a3:65:81:
         e3:28:35:f4:d9:ca:f5:07:6b:86:d9:ad:4c:17:2e:0a:b8:da:
         16:88:e0:f6:4f:d0:5e:68:08:53:58:77:80:1b:b5:7b:01:44:
         a3:f8:40:b9:4c:3a:db:ab:cc:03:b7:00:fe:35:55:80:99:16:
         59:d6:10:fb:a7:c0:9d:15:13:52:16:b2:9d:5b:63:9c:08:f0:
         b9:d6:18:a1:96:76:d4:e2:6c:70:00:f2:e7:82:ee:44:f2:c4:
         7a:08:db:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 21:07:58 2026 by rpki-client